CSA Announces Advanced Cloud Security Practitioner Training, a Highly Technical Hands-on Course for Technical Security Professionals

Program delves deep into practical cloud security, applied DevSecOps for enterprise-scale cloud deployments

SEATTLE – Nov. 4, 2019 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, today announced the availability of Advanced Cloud Security Practitioner Training, an advanced class designed for technical security professionals wanting to expand their hands-on knowledge of cloud security and DevSecOps at enterprise scale. This highly technical, two-day, on-site course goes beyond the basics of CSA’s cloud security hands-on training and delves deep into practical cloud security and applied DevSecOps for enterprise-scale cloud deployments, teaching participants how to configure a production-quality account with multiple virtual networks and core security controls, as well as build a deployment pipeline, integrate it into an existing application stack, and code a variety of security automation controls.

“Real-world cloud security is most definitely not business as usual. The fundamental abstraction and automation used to build cloud platforms upends much of how we implement security. The same principles may apply, but how they apply is dramatically different, especially at enterprise scale,” said Rich Mogull, a prominent industry analyst, CCSK trainer, and author of CSA Guidance v4. “This course has been designed to meet the needs of security professionals looking to take their knowledge and careers to the next level by building their skills sets and testing their ability to build, implement and manage enterprise cloud security architectures.”

Day one of the class begins with an in-depth discussion of cloud platform technologies, providing a look into how the services are built and managed, and security implications. From there, participants quickly begin building out a landing zone in Amazon Web Services (AWS) and a multi-account sandbox environment and deploying security controls. On the second day, the program shifts gears to focus on designing secure architectures, integrating with DevOps, and building a DevSecOps toolkit for managing cloud security at scale. By the course’s completion, participants will have learned how to:

• build enterprise-scale secure cloud architectures;
• implement and manage enterprise security at cloud scale; and
• leverage DevSecOps and automation to build more secure applications and run security operations at the speed of cloud.

Meant for security professionals with solid technical skills* who are ready to level up and learn how to apply them to cloud computing in general, and AWS specifically, Advanced Cloud Security Practitioner Training focuses solely on Infrastructure and Platform as a Service. All labs will be in AWS, with some demonstrations and integrations with Microsoft Azure. (*Students should be extremely comfortable connecting to and working with remote Linux systems via SSH and in navigating the Amazon Web Services console without step-by-step screenshots. Students will need basic Python skills to complete all of the automation labs but code snippets will be provided. All students should complete the pre-class assessment lab and bring their completion token to class. Students unable to keep up with the rapid pace of this training will be expected to complete the labs on their own time outside of class.)

Learn more or register for the upcoming class on Dec. 10 and 11 in Kansas City, MO.